Why doesn't set -e (or set -o errexit, or trap ERR) do what I expected?